Senior Product Security Engineer

Verily is hiring a Senior Product Security Engineer in Boston, MA (onsite) to strengthen Information Security and Privacy Risk Management, with a specific focus on contractual compliance for vulnerability management. This role supports continued FedRAMP authorization by maintaining vulnerability management tooling, driving remediation tracking, validating risk through testing activities, and preparing regulatory reporting.

The salary range for this position is USD 165,500 - 185,500 per year.

What you’ll do

• Manage the tools and inputs that support the Vulnerability Management program.
• Track remediation tasks and coordinate with systems and services owners and relevant stakeholders to maintain vulnerability management compliance.
• Ensure regulator weekly/monthly reporting is delivered to support continual FedRAMP certifications and any necessary remediations such as POA&M.
• Use experience with federal compliance practices (including FISMA and FedRAMP) to regularly report on process and operational readiness.
• Stay current on emerging threats and vulnerabilities, and validate risk for reported threats using vulnerability management, scanning, and red team operations.

Requirements

• BA/BS degree in Computer Science, Engineering, or Management Information Systems.
• 5 years of experience in Information Security or related domain(s).
• 3 years of experience with NIST/FedRAMP compliance audits.
• Strong knowledge of cloud security architecture, web application security, vulnerability management, and security engineering.
• Excellent written and verbal communication skills.

Tools and technologies you’ll use

• NIST, FedRAMP, FISMA
• GCP, AWS
• Kubernetes

Preferred qualifications

• Experience with FedRAMP Moderate or higher.
• Experience with GCP (preferred) or AWS, and containerized environments such as Kubernetes.
• Experience with vulnerability management tools including bug bounty programs, scanning, and offensive security frameworks.